Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
File:                     Tddxzuh-yov3sS4KYwbxgdKlWm0.mft (raw, json)
Hash identifier:          cKvELhrgJnrfcGpAN5ZAjjrzxK90wQJFTmQrc7iQ8Jk=
Subject key identifier:   76:D4:89:EB:4F:DD:56:69:4D:0F:F2:CA:1B:70:49:41:92:66:4A:14
Authority key identifier: 4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D
Certificate issuer:       /CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
Certificate serial:       01962FAB42CF72F8EA959136326B2E3B8963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
Manifest number:          B1
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: Tddxzuh-yov3sS4KYwbxgdKlWm0.crl (hash: DTxQGyfPm9oy4At/a6eTTmMrpdwhlAzjV3QGp4z4J20=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:42:cf:72:f8:ea:95:91:36:32:6b:2e:3b:89:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=76d489eb4fdd56694d0ff2ca1b70494192664a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a4:a6:e1:c9:f9:1c:d6:89:9c:d7:f3:0e:46:
                    77:52:a5:05:7c:b5:a0:6e:19:91:ad:0b:1f:37:7a:
                    5c:d7:c4:c9:9f:9c:3c:04:60:ed:8c:0f:e6:65:b1:
                    0d:ac:d9:1e:96:0a:e9:01:32:79:07:56:3a:4d:e8:
                    2f:71:f8:ec:68:42:cc:5a:92:ea:a9:0c:71:b8:7a:
                    18:41:4b:3f:d3:05:5a:8c:88:19:a0:32:ed:a5:d2:
                    c7:c5:d1:07:d1:0f:55:e2:48:ae:04:3c:7e:10:c3:
                    be:f0:7b:00:7c:13:f9:8a:e1:70:ac:a9:10:0c:aa:
                    89:41:c3:b3:29:ec:0b:33:05:6a:9f:1f:03:05:94:
                    68:f3:47:df:a6:1b:e9:ea:a3:1e:35:fe:9f:6f:70:
                    41:c1:7c:e8:e5:34:6c:a3:22:cb:74:bf:7f:fd:95:
                    cd:fd:f6:58:2f:82:e0:02:97:1e:18:a7:08:29:2a:
                    3f:9f:f8:77:45:2a:c9:a8:5b:78:dd:ab:97:89:6d:
                    0e:fd:0b:e6:fb:2e:60:61:3c:c2:93:da:36:ff:70:
                    85:f0:48:76:1f:b9:a9:af:57:3f:24:83:7b:34:c1:
                    39:15:bd:8f:c8:e3:2f:cd:43:40:26:d9:7d:4f:14:
                    d2:e2:25:9c:e5:71:44:04:f5:af:f0:a2:dc:d4:19:
                    a4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D4:89:EB:4F:DD:56:69:4D:0F:F2:CA:1B:70:49:41:92:66:4A:14
            X509v3 Authority Key Identifier:
                keyid:4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e2:aa:5d:9f:38:52:80:f7:91:ce:c9:25:14:5f:6a:12:d7:
         48:f0:15:4c:33:a1:9b:a6:88:fe:ea:83:46:03:3e:60:a9:c0:
         b5:c0:e3:30:d4:bb:15:54:92:52:67:72:cc:69:af:3c:05:7b:
         8c:d5:b2:10:3a:51:19:0d:02:2d:33:d4:04:2a:62:5f:9c:3b:
         86:34:03:c2:63:62:17:de:dc:14:57:0a:26:8a:f4:ed:7c:97:
         cb:32:f3:eb:3b:d0:da:c2:81:2f:35:85:cb:69:6f:af:6d:81:
         cb:a9:a6:b9:9c:1e:e0:ef:07:01:90:85:50:18:9d:de:98:cc:
         ae:22:31:1d:a2:e8:8b:78:84:a5:47:42:59:cd:b6:df:49:ba:
         fa:bc:1e:0b:1f:ca:e1:2f:25:9f:ec:18:3d:a8:40:f1:f0:5d:
         39:01:c1:a1:0f:13:47:5f:80:a5:90:de:49:16:b2:13:44:d2:
         22:88:3d:21:18:28:36:3f:db:4c:e0:e8:96:ff:23:48:86:b0:
         0e:d4:73:6a:2e:7b:b3:dd:96:57:7f:41:66:33:47:38:d6:25:
         ba:7e:74:3e:be:65:79:11:0f:b9:4d:c1:22:cc:f7:fe:a8:53:
         ce:48:fb:68:6b:7f:b0:48:79:8b:b9:a6:bb:eb:dd:27:6c:18:
         82:7b:bc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----